egbt/secrets
1
0
Fork 0
Code Issues Pull requests Projects Releases 13 Packages Wiki Activity Actions

Commit graph

  • d984e2abc7 docs: repoint forge references from Codeberg to git.dev.egbt.com main Brian Majewski 2026-09-08 16:00:54 -07:00
  • c83935a92f Merge pull request 'v0.7.7.0 fix: discover workspaces in pnpm and yarn monorepos (EGB-1232)' (#16) from brian/egb-1232-pnpm-workspace-discovery into main EGBT Technologies 2026-09-09 00:26:05 +02:00
  • c09ac38b16 fix: discover workspaces in pnpm and yarn monorepos (EGB-1232) brian/egb-1232-pnpm-workspace-discovery Brian Majewski 2026-09-08 15:22:04 -07:00
  • b3a727c8fb Merge pull request 'v0.7.6.0 fix: loud store sync failures + secrets sync reconcile (EGB-1230, EGB-1231)' (#15) from brian/egb-1230-1231-store-sync into main EGBT Technologies 2026-09-08 23:32:25 +02:00
  • f1cf9d9e7e docs: correct Codeberg tea invocation in CLAUDE.md brian/egb-1230-1231-store-sync Brian Majewski 2026-09-08 14:31:16 -07:00
  • dd6a025fa0 fix: surface store sync failures + add secrets sync (EGB-1230, EGB-1231) Brian Majewski 2026-09-08 14:20:20 -07:00
  • 2558ea3c23 Merge pull request 'v0.7.5.0 feat: multi-recipient age encryption (recipients/reencrypt, EGB-283)' (#14) from brian/egb-283-secrets-multi-recipient-age-encryption-multiple-keys-per into main v0.7.5.0 EGBT Technologies 2026-06-24 23:55:29 +02:00
  • e29024bd63 Merge origin/main into EGB-283 (multi-recipient age encryption) brian/egb-283-secrets-multi-recipient-age-encryption-multiple-keys-per Brian Majewski 2026-06-24 14:52:32 -07:00
  • 17772dfec6 fix: validate-before-mutate in recipients add/rm + verify messaging + doc/UX polish (EGB-283) Brian Majewski 2026-06-24 13:37:56 -07:00
  • f7576a3eae docs: multi-recipient age encryption (recipients/reencrypt) + bump 0.6.2.0 (EGB-283) Brian Majewski 2026-06-24 13:25:33 -07:00
  • b09f94c92f test: pin security fixtures to the validation rail (EGB-283) Brian Majewski 2026-06-24 13:21:33 -07:00
  • 28f44f043c test: recipients.txt security regression fixtures + dangling-symlink fix (EGB-283) Brian Majewski 2026-06-24 13:17:28 -07:00
  • e4cd524483 feat: verify asserts blob recipient-count matches recipients.txt (EGB-283) Brian Majewski 2026-06-24 13:10:53 -07:00
  • ae52b8c077 test: restore bootstrap-path + which-legacy coverage (EGB-283) Brian Majewski 2026-06-24 13:06:57 -07:00
  • 50b73083f1 feat: init born-multi recipients.txt + which recipients line (EGB-283) Brian Majewski 2026-06-24 13:03:20 -07:00
  • cad5b66f77 feat: secrets recipients rm with lockout guards (EGB-283) Brian Majewski 2026-06-24 12:56:50 -07:00
  • 4ba0234bd7 fix: harden recipients add --name validation (EGB-283) Brian Majewski 2026-06-24 12:53:27 -07:00
  • c262661030 feat: secrets recipients add (EGB-283) Brian Majewski 2026-06-24 12:50:00 -07:00
  • a10f390519 feat: shared _reencrypt_all + reencrypt cmd + dual rekey (EGB-283) Brian Majewski 2026-06-24 12:44:44 -07:00
  • 649aa78063 feat: secrets recipients list (EGB-283) Brian Majewski 2026-06-24 12:39:52 -07:00
  • 14cf86fba9 docs: plan fixups from Task 1 review (blob path, dangling-symlink fix to Task 8) Brian Majewski 2026-06-24 12:37:55 -07:00
  • 0f9de1c2fd feat: multi-recipient encrypt core + recipients.txt (EGB-283) Brian Majewski 2026-06-24 12:33:05 -07:00
  • 3a7eea5529 docs: multi-recipient age encryption implementation plan (EGB-283) Brian Majewski 2026-06-24 12:20:32 -07:00
  • 9e2a563059 docs: multi-recipient age encryption design spec (EGB-283) Brian Majewski 2026-06-24 12:12:14 -07:00
  • 6b98ee8208 Merge pull request 'v0.7.4.0 feat: secrets upgrade verb — self-update + re-check version skew (EGB-716)' (#13) from brian/egb-716-secrets-secrets-upgrade-verb-self-update-re-check-version into main EGBT Technologies 2026-06-18 21:16:21 +02:00
  • a17ae4448b chore: bump version and changelog (v0.7.4.0) brian/egb-716-secrets-secrets-upgrade-verb-self-update-re-check-version Brian Majewski 2026-06-18 11:01:17 -07:00
  • 09c4ad54f9 feat: secrets upgrade verb — self-update + re-check version skew (EGB-716) Brian Majewski 2026-06-18 11:01:17 -07:00
  • 33a5bb0758 Merge pull request 'v0.7.3.1 refactor: external-extractor + read-guard dedup, legacy-pull nested-blob warning (EGB-701)' (#12) from brian/egb-701-secrets-stage-1-structural-cleanups-dedup-external-entry into main EGBT Technologies 2026-06-18 19:40:18 +02:00
  • 3ece393cc5 chore: bump version and changelog (v0.7.3.1) brian/egb-701-secrets-stage-1-structural-cleanups-dedup-external-entry Brian Majewski 2026-06-18 10:08:13 -07:00
  • 1ee096cc33 refactor: dedup external extractor + read guards, warn on legacy-pull nested blobs (EGB-701) Brian Majewski 2026-06-18 10:08:13 -07:00
  • 57f1280262 Merge pull request 'v0.7.3.0 feat: secrets join + verified onboarding scripts (EGB-671)' (#11) from brian/egb-671-create-real-install-scripts into main v0.7.3.0 EGBT Technologies 2026-06-09 01:30:08 +02:00
  • 4d975d447d chore: rewrite onboarding docs + bump version (v0.7.3.0) brian/egb-671-create-real-install-scripts Brian Majewski 2026-06-08 16:23:50 -07:00
  • 7b041af68b feat: thin install.sh onboarding bootstrap (EGB-671) Brian Majewski 2026-06-08 16:23:50 -07:00
  • 6319313ee4 feat: secrets join + init --remote + verified onboarding (EGB-671) Brian Majewski 2026-06-08 16:23:50 -07:00
  • ec538d7ef0 Merge pull request 'v0.7.2.0 feat: secrets list --json machine-readable output (EGB-699)' (#10) from brian/egb-699-secrets-list-json-machine-readable-output into main v0.7.2.0 EGBT Technologies 2026-06-08 23:00:47 +02:00
  • 446256caf1 feat: secrets list --json machine-readable output (EGB-699) brian/egb-699-secrets-list-json-machine-readable-output Brian Majewski 2026-06-08 13:56:45 -07:00
  • b8fe20f9bf Merge pull request 'v0.7.1.0 feat: version-skew nudge (EGB-713)' (#9) from brian/egb-713-secrets-warn-when-the-store-was-written-by-a-newer-client into main EGBT Technologies 2026-06-08 21:11:31 +02:00
  • 50476e19fd docs: version-skew nudge + writer-version; bump 0.7.1.0 (EGB-713) brian/egb-713-secrets-warn-when-the-store-was-written-by-a-newer-client Brian Majewski 2026-06-08 12:07:51 -07:00
  • 5461418c5d feat: version-skew nudge — stamp store writer-version, warn when behind (EGB-713) Brian Majewski 2026-06-08 12:07:50 -07:00
  • 367b70cba1 docs: EGB-713 version-skew nudge plan Brian Majewski 2026-06-08 11:56:47 -07:00
  • 40635f9e1f Merge pull request 'v0.7.0.0 feat: additive-v2 dual-write — optional finalize (EGB-712)' (#8) from brian/egb-712-secrets-additive-v2-dual-write-defuse-the-finalize into main EGBT Technologies 2026-06-08 20:01:47 +02:00
  • 9b9af2f30c docs: additive-v2 propagation + optional-GC finalize; bump 0.7.0.0 (EGB-712) brian/egb-712-secrets-additive-v2-dual-write-defuse-the-finalize Brian Majewski 2026-06-08 10:52:34 -07:00
  • 040782cad0 feat: secrets migrate --status surfaces v2-only externals (coverage, EGB-712) Brian Majewski 2026-06-08 10:44:34 -07:00
  • 69ab9636e9 test: fabricate old-client v1 blobs in migrate/finalize/status fixtures (additive v2, EGB-712) Brian Majewski 2026-06-08 10:38:18 -07:00
  • 2f36fe1898 feat: twin-rule write targets — dual-write existing, v2-only for new (additive v2, EGB-712) Brian Majewski 2026-06-08 10:31:00 -07:00
  • 2866e5f4b1 feat: read-resolver tries both external suffixes (additive v2, EGB-712) Brian Majewski 2026-06-08 10:08:41 -07:00
  • ee4ea413ef docs: additive-v2 implementation plan + spec §3 fix (no marker auto-stamp) Brian Majewski 2026-06-08 09:58:23 -07:00
  • 54575af61c docs: additive-v2 dual-write design spec (defuse the finalize gate) Brian Majewski 2026-06-08 09:45:10 -07:00
  • 836b418a12 Merge pull request 'v0.6.1.0 feat: secrets migrate guided flow (manifest-free + --status, EGB-710)' (#7) from brian/egb-710-secrets-make-migrate-a-guidedinteractive-flow-not-a-dead-end into main EGBT Technologies 2026-06-08 18:06:18 +02:00
  • 3ac2a86a94 docs: fix stale manifest-dependency comments in migrate (EGB-710) brian/egb-710-secrets-make-migrate-a-guidedinteractive-flow-not-a-dead-end Brian Majewski 2026-06-08 08:26:16 -07:00
  • 5729d84e75 docs: migrate --status + manifest-free copy-forward; bump 0.6.1.0 (EGB-710) Brian Majewski 2026-06-08 08:01:44 -07:00
  • 469b08203b feat: secrets migrate --status surveys per-project v2 readiness (EGB-710) Brian Majewski 2026-06-08 07:34:55 -07:00
  • e75627deff test: migrate twins undeclared store blobs (finalize-consistency, EGB-710) Brian Majewski 2026-06-08 07:18:22 -07:00
  • c121982dcd fix: migrate copy-forward is manifest-free, no dead-end on legacy projects (EGB-710) Brian Majewski 2026-06-08 06:58:22 -07:00
  • 679ddbc1b7 docs: EGB-710 implementation plan (migrate guided flow) Brian Majewski 2026-06-08 06:46:50 -07:00
  • 633d19e5f7 Merge pull request 'v0.6.0.1 feat: secrets which prints manifest version (EGB-700)' (#6) from brian/egb-700-which-manifest-version into main v0.6.0.1 EGBT Technologies 2026-06-08 15:23:18 +02:00
  • 2549832f0e docs: sync test counts and which manifest-version note (EGB-700) brian/egb-700-which-manifest-version Brian Majewski 2026-06-08 06:21:26 -07:00
  • 6a84846e64 chore: bump version and changelog (v0.6.0.1) Brian Majewski 2026-06-08 06:19:57 -07:00
  • 94ee6ec9a2 feat: secrets which prints the manifest version (EGB-700) Brian Majewski 2026-06-08 06:02:11 -07:00
  • eaa08e8561 Merge pull request 'v0.6.0.0 feat: store-format-v2 migration (EGB-703)' (#5) from brian/egb-703-store-format-v2-migration into main v0.6.0.0 EGBT Technologies 2026-06-08 02:00:34 +02:00
  • c4da47f320 docs: correct test counts for migrate.bats (236 total) brian/egb-703-store-format-v2-migration Brian Majewski 2026-06-07 16:57:53 -07:00
  • cefa06280e chore: bump version and changelog (v0.6.0.0) Brian Majewski 2026-06-07 16:56:27 -07:00
  • c10e89fb51 fix: pre-landing review for store-format-v2 (verify-window orphan, copy-forward push, --force, comment) Brian Majewski 2026-06-07 16:47:17 -07:00
  • 5521d978a3 test: coverage for migrate gap branches (dotenv-only finalize, positional-arg die, already-v2 finalize, strict marker parse) Brian Majewski 2026-06-07 16:35:26 -07:00
  • 2192b5a2df fix: tighten _store_format parse + correct finalize crash-orphan comment (EGB-703 review) Brian Majewski 2026-06-07 16:18:16 -07:00
  • e2ad661da5 feat: store-format-v2 self-describing migration (EGB-703, folds in EGB-700) Brian Majewski 2026-06-07 16:07:31 -07:00
  • 144ff3692b Merge pull request 'v0.5.0.0 feat: secrets verify integrity check (EGB-698)' (#4) from brian/egb-698-secrets-verify-command into main v0.5.0.0 EGBT Technologies 2026-06-08 00:34:02 +02:00
  • e33bc272d2 docs: surface secrets verify in troubleshooting, refresh test counts (v0.5.0.0) brian/egb-698-secrets-verify-command Brian Majewski 2026-06-07 15:31:30 -07:00
  • d170fb03db chore: bump version and changelog (v0.5.0.0) Brian Majewski 2026-06-07 15:29:01 -07:00
  • 414c02b902 fix: pre-landing review fixes for verify (test assertions, ekeys discard, double-report, docs) Brian Majewski 2026-06-07 15:22:58 -07:00
  • 33aad4f89a test: coverage for verify gap branches (external decrypt-fail, unsafe path, unknown flag, malformed manifest, empty --all) Brian Majewski 2026-06-07 15:14:54 -07:00
  • 52528f2e06 feat: secrets verify — manifest↔store consistency + decrypt integrity (EGB-698) Brian Majewski 2026-06-07 14:55:42 -07:00
  • fb71b956da Merge pull request 'v0.4.0.0 feat: .secrets.json manifest-driven sync (EGB-677 stage 1)' (#3) from brian/egb-677-unify-storage-model-manifest-driven-sync-store-format-v2 into main v0.4.0.0 EGBT Technologies 2026-06-07 22:57:21 +02:00
  • a35bff8d4b docs: correct manifest.bats and total test counts for v0.4.0.0 brian/egb-677-unify-storage-model-manifest-driven-sync-store-format-v2 Brian Majewski 2026-06-07 13:53:05 -07:00
  • 30c203cafd chore: bump version and changelog (v0.4.0.0) Brian Majewski 2026-06-07 13:50:51 -07:00
  • 588f290dcc chore: security review policy + operator runner, doc updates (EGB-677 stage 1) Brian Majewski 2026-06-07 13:12:39 -07:00
  • c6ea724ddb fix: rekey and list recurse into nested manifest blobs (EGB-677 stage 1) Brian Majewski 2026-06-07 13:12:27 -07:00
  • 5489f89446 test: coverage backfill — which UNSAFE marker, malformed-manifest add, dry-run declared list, frozen absorb suppression, file-type absorb round-trip, external dedup Brian Majewski 2026-06-07 10:17:07 -07:00
  • ecc4f23494 test: coverage for stage-1 gap paths (json rail warns, symlink legacy, directed errors, dry-run/which branches) Brian Majewski 2026-06-07 09:40:43 -07:00
  • 89e851278b feat: jq gating, platform-aware install hints, stage-1 docs (EGB-677 stage 1) Brian Majewski 2026-06-07 08:58:16 -07:00
  • 0049584d9b feat: manifest-driven pull — nested restore, restore-time rail, empty no-op (EGB-677 stage 1) Brian Majewski 2026-06-07 08:49:02 -07:00
  • d7e1400487 feat: external entries via .secrets.json + legacy absorb + properties rail (EGB-677 stage 1) Brian Majewski 2026-06-07 08:44:02 -07:00
  • 884da0965c feat: manifest-aware push — generator auto-add, autoAdd toggle, --frozen/--dry-run (EGB-677 stage 1) Brian Majewski 2026-06-07 08:32:17 -07:00
  • 18018dbd3b feat: .secrets.json manifest core — add command, rails, canonical form (EGB-677 stage 1) Brian Majewski 2026-06-07 08:24:35 -07:00
  • 6dbc4e0d01 test: make [[ ]] assertions effective under bash 3.2 (EGB-677 precursor) Brian Majewski 2026-06-07 08:21:29 -07:00
  • a3c71f293b Merge branch 'feat/external-file-type' (v0.3.0.0) v0.3.0.0 Brian Majewski 2026-06-07 06:44:40 -07:00
  • a314cb1fb1 docs: CLAUDE.md — record the 'file' external type (EGB-652) Brian Majewski 2026-06-07 06:44:22 -07:00
  • e0474f3ce9 feat: 'file' external type — whole-file sync for .secrets-files (EGB-652) Brian Majewski 2026-06-07 06:43:45 -07:00
  • ab45c4c94b Merge pull request 'docs: Codeberg/tea operations guide' (#2) from docs/codeberg-tea-guide into main EGBT Technologies 2026-06-05 19:59:02 +02:00
  • 783be5cd96 docs: add Codeberg/tea operations guide to CLAUDE.md Brian Majewski 2026-06-05 10:58:31 -07:00
  • 6ab22c2b95 Merge branch 'fix/init-second-machine-guard' (v0.2.1.0) v0.2.1.0 Brian Majewski 2026-06-05 10:49:54 -07:00
  • ba4c53a160 docs: update README for v0.2.1.0 Brian Majewski 2026-06-05 10:29:07 -07:00
  • 8d9e9a3bfc chore: bump version and changelog (v0.2.1.0) Brian Majewski 2026-06-05 10:26:07 -07:00
  • 2a7afc34dd fix: pre-landing review fixes (heal ordering, key untrack, content-aware gitignore) Brian Majewski 2026-06-05 10:14:46 -07:00
  • 5865c40d77 test: coverage for store protections self-heal (hook on push/rekey, no-op, gitignore content) Brian Majewski 2026-06-05 09:52:51 -07:00
  • 53350853d9 Merge remote-tracking branch 'origin/main' into fix/init-second-machine-guard Brian Majewski 2026-06-05 09:41:27 -07:00
  • 6db4f2b217 chore: add gstack skill routing rules to CLAUDE.md Brian Majewski 2026-06-05 09:40:39 -07:00
  • 25cd1feb43 fix: init second-machine guard, store .gitignore self-heal, rekey dotfile loss Brian Majewski 2026-06-05 09:38:16 -07:00
  • 8b2fc4d980 docs: update CLAUDE.md deploy note to Codeberg Brian Majewski 2026-06-01 18:31:04 -07:00
  • e947cfde19 Merge pull request 'brian/egb-531-secrets-support-gradleproperties-files-not-just-dotenv' (#1) from brian/egb-531-secrets-support-gradleproperties-files-not-just-dotenv into main v0.2.0.0 EGBT Technologies 2026-05-26 23:59:38 +02:00